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Abstract 



PROBLEM TO BE SOLVED: To share clinical consultation data on condition that the privacy of an individual 
is protected and security is secured by providing a means which adds an access control setting file as one 
attribute of medical consultation information of a patient of each medical organ, and exchanging clinical 
consultation information on the patient according to the access control setting file. 
SOLUTION: A hospital 101 and a hospital 102 performs a mutual authenticating process about whether or 
not they have the right to exchange clinical consultation data on the patient A. Then a random number R 
generated on the side of the hospital 101 is sent together with the ID number of the patient A according to 
the address HOSP of a file server 105 of the hospital 102 in the access control setting file. The file server 
105 of the hospital 102 takes the mutual authentication key Ak of the access control setting file out of a 
clinical consultation data storage file of the patient A. Then Ak(R) generated by ciphering the random 
number R with the authentication key Ak and the random number R generated at the hospital 102 are sent 
back to the hospital 101 according to the address HOSP of a file server 104 of the hospital 101 in the access 
control setting file. 
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